Linux

I understand that sand-boxing can be achieved by other means, and flatpak is using kernel facilities. But this is actually way to make it mainstream, and ease applications packaging. Similar thing to what happens on mobile platforms, like Android and UWP(bruh). So this is actually progress to better and safer desktop. Not perfect yet.

Most flatpaks don't require access to root or home fs, so host files are shielded. Only way to access fs is using file access dialogs and Drag'n'Drop(which is broken currntly)

good sandboxing has to be configured by trusted 3rd parties, like package maintainers, not by upstream developers, because the latter creates a conflict of interest.

Unfortunately this is true. But you can check defined permissions before installing app. And user would be notified it application after update requires more permissions.

But I guess flathub maintainers won't check/review packages, so not ideal.

What solution would you use instead of Flatpak for sandboxing and reducing the workload of maintainers providing packages to many distributions at the same time?

I'd rather have a maintainer spend time on actually maintaining software instead of packaging it. They can package as AppImage, tarball and Flatpak and I'm happy. You don't have to use Flatpak, you know? Linux is about choice. I have never used any software which was available exclusively as Flatpak.